Alphabeta Math
Pipeline-generated
How statement and proof provenance work

The first chip identifies the source of the statement or construction; the second identifies the source of its local proof or verification.

  • Literature-sourced: the exact statement appears in a cited source; only wording and notation differ.
  • AI-adapted: a semantically identical restatement of literature-sourced material, modulo indexing, notation, and boundary cases adopted by the library.
  • AI-generated: a genuinely novel statement formulated by AI, with no source for the claim itself.

These labels describe origin, not correctness: citations and verification chips remain separate evidence.

✓ 10 results · all verified · 10 also independently AI-judged
Every result on this page is machine-checked by a proof checker and read in full and owner-audited; the judge is an additional, independent cross-model AI review of the proofs; all 10 also cleared it.

Adaptive ODE solvers and error estimation

1 · Prerequisites

2 · Summary

Summary

An embedded explicit Runge–Kutta pair shares stages and reports the difference between its high and low outputs. The difference estimates the lower-order local defect only asymptotically when its leading coefficient is nonzero; it is used as a heuristic by a fully specified accept/reject controller with norm scaling, safety factor, step bounds, and a finite attempt budget. Neither an accepted step nor a completed controller run certifies global error or diagnoses stiffness. The generic fixed uniform-mesh global-error theorem has a distinct mesh and exact-defect premise.

For the Euler–Heun pair, the page derives both local defects and constructs a quadratic dense output with its own uniform within-step error. It also states the continuous-residual a posteriori error estimate. A separate choice-free proof covers piecewise-C1 reconstructions, and a bounded residual plus one-sided Lipschitz estimate yields the integrating-factor bound.

The validated branch is intentionally finite and narrow: it checks rational ODE expression DAGs, dyadic polynomial reconstructions, interval enclosures, residuals, Jacobian bounds, and a strict radius supersolution. Its soundness argument accounts for the actual stored reconstruction, including interpolation or stage error represented in its coefficients. Unsupported operations or failed inclusions return inconclusive; no embedded difference is treated as a residual certificate.

3 · Logical flowchart

4 · Definitions, theorems and proofs

LemmaStatement: Literature-sourcedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

A maximal ODE solution cannot remain in a compact tube to a finite endpoint

Statement

Let d≥1 and D⊆R×Rd be open, and let f:D→Rd be continuous and locally Lipschitz in the state variable. There is no maximal solution x:I→Rd of x′=f(t,x) whose interval has a finite right endpoint b and for which some t0∈I, t0<b, and compact set C⊆D satisfy (t,x(t))∈C for every t∈[t0,b). The compact tube condition supplies boundedness of f along the graph and a limit point inside the open domain.

Facts & Assumptions

Given: The ODE, maximal solution, finite endpoint b, and compact tube C in the Statement.

[F1]

First-order systems, initial value problems, and solutions on intervals: a solution is differentiable on its interval, remains in D, and satisfies x′(t)=f(t,x(t)).

[F2]

Extensions, maximal solutions, maximal intervals, and global solutions: maximality means that no solution on a strictly larger interval restricts to x.

[F3]

A continuous real-valued function on a nonempty compact metric space is bounded and attains a greatest and a least value: a continuous real-valued function on a nonempty compact metric space is bounded.

[F4]

The mean value theorem, as the case g(x)=x of Cauchy's: for f continuous on [a,b] with a<b and differentiable on (a,b) there is c∈(a,b) with f(b)−f(a)=f′(c)(b−a): a scalar function continuous on a closed interval and differentiable on its interior has a point where its derivative equals the interval's average rate of change; in particular, if the derivative is bounded in absolute value by M, the function is M-Lipschitz.

[F5]

The reals are complete: every Cauchy sequence of real numbers converges to a real number.

[F7]

Picard-Lindelöf local existence and uniqueness for first-order systems: for continuous locally state-Lipschitz f on an open domain, an initial point in the domain has a local solution through it.

[F8]

Locally unique ODE solutions agree on overlaps and glue across a common endpoint: solutions through a common endpoint agree where they overlap and their adjacent pieces glue to a solution.

Proof

1.1givenF1F3F4construct

For each coordinate fi, compactness of C and [F3] give a finite bound Mi for ∣fi∣ on C. Put M:=∑i=1dMi. For s<t in [t0,b), [F1] gives ∣xi′(u)∣=∣fi(u,x(u))∣≤Mi for every u∈(s,t); [F4] yields ∣xi(t)−xi(s)∣≤Mi(t−s). Summing coordinate differences shows ∥x(t)−x(s)∥2≤M(t−s).

2.1F1F5F6step 1.1construct

Choose the explicit sequence tn:=b−(b−t0)/(n+1). It increases to b, and [F1] and step 1.1 make each coordinate of x(tn) Cauchy. By [F5] each coordinate has a limit; call the resulting vector xb. The same Lipschitz estimate in step 1.1 implies x(t)→xb as t↑b. Thus (tn,x(tn))→(b,xb) in Euclidean space. Since every term lies in C, [F6] gives (b,xb)∈C⊆D.

3.1F1F4F7step 2.1algebra

By [F7] there is a local solution z through (b,xb). If b∈I, continuity of the solution at its endpoint gives x(b)=xb; if b∉I, define the endpoint value x(b):=xb. For each coordinate and each t<b sufficiently close to b, the real mean value theorem [F4] applied to this continuous extension on [t,b] gives a point c∈(t,b) with (xi(b)−xi(t))/(b−t)=fi(c,x(c)). Continuity of f and x(c)→xb makes this quotient tend to fi(b,xb) as t↑b. Hence the left derivative at b equals f(b,xb), which is also the right derivative of z.

4.1F2F8step 3.1∎

The endpoint extension and z agree at b, and [F8] glues the original solution, its endpoint value, and z into a solution on a strictly larger interval. This contradicts [F2], proving that no maximal solution can satisfy the stated finite-endpoint compact-tube conditions.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

A posteriori ODE error bound from the continuous residual

Statement

Assume the Axioms of Countable Choice and Dependent Choice. Let d≥1 and a<b, let D⊆R×Rd be open, let f:D→Rd be continuous, and let y:[a,b]→Rd be an exact solution of y′=f(t,y) whose graph lies in D. Let U:[a,b]→Rd be componentwise absolutely continuous with graph in D. Suppose ℓ,ρ∈L1[a,b], ρ≥0 almost everywhere, and, for almost every t, the points U(t),y(t) satisfy

⟨U(t)−y(t),f(t,U(t))−f(t,y(t))⟩≤ℓ(t)∥U(t)−y(t)∥22.

Define r(t):=U′(t)−f(t,U(t)) wherever U′ exists, and assume ∥r(t)∥2≤ρ(t) almost everywhere. Then, for every t∈[a,b],

∥U(t)−y(t)∥2≤exp⁡ ⁣(∫atℓ(v) dv)∥U(a)−y(a)∥2+∫atexp⁡ ⁣(∫stℓ(v) dv)ρ(s) ds.

The bound is a posteriori: it uses the residual of the actual reconstruction. An embedded Runge–Kutta difference alone does not supply the hypothesis ∥r(t)∥2≤ρ(t).

Facts & Assumptions

Given: The domain, exact solution, reconstruction, integrable coefficient and residual bound in the Statement, and Countable Choice plus Dependent Choice.

[A1]

The Axiom of Countable Choice (ACω) and The axiom of dependent choice: a relation in which every element is related to something admits an N-indexed chain: the proof assumes both axioms only when applying the library's fundamental theorem for absolutely continuous functions.

[A2]

For almost every t, ⟨U(t)−y(t),f(t,U(t))−f(t,y(t))⟩≤ℓ(t)∥U(t)−y(t)∥22.

[A3]

r(t)=U′(t)−f(t,U(t)) satisfies ∥r(t)∥2≤ρ(t) almost everywhere, with ℓ,ρ∈L1[a,b] and ρ≥0 almost everywhere.

[L1]

The class L1(μ) of integrable functions and Integrable real and complex functions, and their integrals: g∈L1[a,b] means that g is measurable and ∫ab∣g∣<∞; the measure is Lebesgue measure restricted to [a,b].

[F1]

Absolute continuity on a compact interval: absolute continuity on [a,b] is the finite disjoint-interval increment condition.

[F2]

First-order systems, initial value problems, and solutions on intervals: a solution remains in the open time-state domain and satisfies y′=f(t,y).

[F3]

Fundamental theorem of calculus for absolutely continuous functions: under Countable Choice and Dependent Choice, an absolutely continuous real function has integrable derivative almost everywhere and equals its initial value plus the integral of that derivative.

[F4]
[F5]

The indefinite integral of an L1 function is absolutely continuous and The indefinite integral of an L1 function is differentiable almost everywhere: if g∈L1, then its indefinite integral is absolutely continuous and has derivative g almost everywhere.

[F10]

The modulus of an integral is bounded by the integral of the modulus: for g∈L1, ∣∫g∣≤∫∣g∣.

[F11]

Monotonicity and nonnegative homogeneity of the nonnegative integral: the nonnegative Lebesgue integral is monotone and homogeneous for nonnegative finite scalars.

[F12]

Arithmetic and lattice operations preserve measurability whenever they are defined: sums, scalar multiples, products and absolute values of measurable real-valued functions are measurable.

[F13]
[F14]

The Euclidean inner product ⟨x,y⟩=∑k<nxkyk on Rn: ⟨x,y⟩=∑ixiyi, the form is bilinear and symmetric, and ∥x∥22=⟨x,x⟩.

Proof

1.1givenF1F4F14algebra

Put e:=U−y and q(t):=∥e(t)∥2. Each component ei is absolutely continuous by [F1]. Given ϵ>0, choose for each of the finitely many components a positive interval-length threshold that makes the sum of its increments less than ϵ/d; the minimum of these finitely many thresholds works for all components at once. For any finite disjoint interval family with total length below that minimum, [F4] gives ∣q(v)−q(u)∣≤∥e(v)−e(u)∥2≤∑i∣ei(v)−ei(u)∣, so the total increments of q are below ϵ. Thus q is absolutely continuous by [F1].

2.1givenA1A2A3F2F3F4F14step 1.1algebra

By [F3], q and each component of e are differentiable almost everywhere; the finite intersection of these full-measure sets is still full measure. At such a point with q>0, differentiating q2=⟨e,e⟩ using [F14] gives 2qq′=2⟨e,e′⟩, hence q′=⟨e,e′⟩/q. Since e′=r+f(t,U)−f(t,y), [A2], [A3], and [F4] imply q′≤ℓq+ρ. At a differentiability point where q=0, the nonnegative function q has a local minimum, so q′=0 and the same inequality holds.

3.1givenA1L1F5F6F7F8F9F10F11step 2.1algebra

Define Λ(t):=∫atℓ(v) dv and w(t):=exp⁡(−Λ(t)). By [F5], Λ is absolutely continuous and Λ′=ℓ almost everywhere. [F10] and [F11] give ∣Λ(t)∣≤∫ab∣ℓ(v)∣ dv=:M, and ∣ddxexp⁡(−x)∣=exp⁡(−x)≤exp⁡(M) on [−M,M], so [F8] and [F9] make x↦exp⁡(−x) Lipschitz there. By [F6], w and wq are absolutely continuous. At almost every point, [F7]–[F8] give (wq)′=w(q′−ℓq)≤wρ.

4.1A1L1F3F11F12F13step 3.1algebra

The product wρ is measurable by [F12], and ∣wρ∣≤exp⁡(M)ρ almost everywhere. Since ρ≥0 almost everywhere and ∫abρ<∞, [F11] implies ∫ab∣wρ∣<∞; [L1] gives wρ∈L1. By [F3], (wq)′∈L1, so h:=wρ−(wq)′ is in L1 by [F13]. Step 3.1 says h≥0 almost everywhere. Since 0≤h+≤∣h∣ almost everywhere, [F11] and h∈L1 give ∫abh+<∞; measurability follows from [F12], so [L1] gives h+∈L1. Thus h=h+ almost everywhere; [F13] gives ∫ath=∫ath+, and [F11] gives ∫ath+≥0. Hence ∫at(wq)′≤∫atwρ.

5.1A1F3F8step 4.1algebra∎

Apply [F3] to wq on [a,t], and use w(a)=1 and w(t)>0 from [F8]. Step 4.1 gives q(t)≤exp⁡(Λ(t))q(a)+∫atexp⁡(Λ(t)−Λ(s))ρ(s) ds. Substituting the definition of Λ gives the asserted bound.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

Choice-free residual error bound for piecewise-C1 ODE reconstructions

Statement

Let d≥1 and a<T, let D⊆R×Rd be open, let f:D→Rd be continuous, and let y be an exact solution of y′=f(t,y) on [a,T]. Let U:[a,T]→Rd be continuous and C1 on each member of a finite partition (continuously differentiable on each closed panel, with one-sided endpoint derivatives), with graph in D. Let ℓ,ρ:[a,T]→[0,∞) be continuous on each partition interval, with one-sided endpoint values, and suppose on every open panel ⟨U−y,f(t,U)−f(t,y)⟩≤ℓ(t)∥U−y∥22,∥U′(t)−f(t,U(t))∥2≤ρ(t). Then for every t∈[a,T], ∥U(t)−y(t)∥2≤e∫atℓ(v) dv∥U(a)−y(a)∥2+∫ate∫stℓ(v) dvρ(s) ds. The proof uses only finite-piece ordinary calculus and no choice axiom. The general absolutely continuous case is treated separately.

Facts & Assumptions

Given: The exact solution, reconstruction, finite partition, nonnegative piecewise-continuous coefficient and residual envelope in the Statement.

[F1]

First-order systems, initial value problems, and solutions on intervals: the exact solution is differentiable and satisfies y′=f(t,y).

[F7]

The Euclidean inner product ⟨x,y⟩=∑k<nxkyk on Rn: the Euclidean inner product is symmetric and bilinear, and ∥e∥22=⟨e,e⟩.

Proof

1.1givenF1F2F3F6F7algebra

On one open partition panel put e=U−y, qε=(∥e∥22+ε2)1/2 for ε>0, and r=U′−f(t,U). The functions are C1 there, so [F3], [F6], and [F7] give qε′=⟨e,e′⟩/qε. Since e′=r+f(t,U)−f(t,y), the hypotheses and [F2] yield qε′≤ℓ∥e∥22qε+ρ∥e∥2qε≤ℓqε+ρ, using ℓ≥0, ∥e∥2≤qε, and ∥e∥22≤qε2.

2.1F3F4F5step 1.1algebra

Let Λ(t)=∫atℓ(v) dv and multiply the differential inequality by e−Λ(t). On each panel, [F3]–[F5] give (e−Λqε)′≤e−Λρ. Integrate on each full or partial panel and add the finitely many inequalities; continuity at the partition nodes cancels the intermediate endpoint terms. This gives qε(t)≤eΛ(t)qε(a)+∫ateΛ(t)−Λ(s)ρ(s) ds.

3.1step 2.1algebra∎

Let ε↓0. Since qε(t)→∥U(t)−y(t)∥2 and qε(a)→∥U(a)−y(a)∥2, while the integral term is independent of ε, the inequality in step 2.1 passes to the limit. Replacing Λ(t)−Λ(s) by ∫stℓ(v) dv gives the claimed estimate.

DefinitionDefinition: Literature-sourcedProof: Not applicableOpen item page →

Embedded Runge–Kutta pair and difference estimator

Definition

For an ODE y′=f(t,y) on states in Rd with d≥1, two explicit Runge–Kutta weight vectors b=(bi)i=1s and b^=(b^i)i=1s are an embedded pair when they use the same explicit stage recursion Ki=f ⁣(tn+cih, yn+h∑j<iaijKj),1≤i≤s, but produce two one-step values Y=yn+h∑i=1sbiKi,Y^=yn+h∑i=1sb^iKi. The two methods are the high and low members when their local orders are respectively at least p+1 and p, for an integer p≥1. Their embedded difference estimator is the nonnegative scalar En(h):=∥Y^−Y∥2, with the Euclidean norm. This definition asserts only how the estimator is computed; its reliability as a bound for either local defect is a separate claim and is not part of the definition.

The stage recursion and the local defect sign convention are those of Explicit Runge–Kutta tableaus, stage maps, and failure status and One-step ODE methods, local defect, uniform order, and step stability.

AlgorithmAlgorithm: Literature-sourcedProof: Not applicableOpen item page →

Finite-budget adaptive Runge–Kutta controller

Definition

Inputs are an IVP in the sense of First-order systems, initial value problems, and solutions on intervals, y′=f(t,y) on an open domain D⊆R×Rd with initial data (t0,y0)∈D and requested interval [t0,T], where t0≤T and d≥1; an initial proposal 0<hinit≤hmax⁡; an embedded pair with low order p≥1 as in Embedded Runge–Kutta pair and difference estimator; tolerances atol>0 and rtol≥0; safety 0<σ<1; scale bounds 0<γmin⁡≤1≤γmax⁡; step bounds 0<hmin⁡≤hmax⁡; and a positive integer attempt budget N.

Output. Return a record consisting of one of success, failure, minimum-step-rejected, or attempt-budget-exhausted, together with the accepted mesh A=((t0,y0),…,(tm,ym)). The mesh always contains the initial pair and every accepted endpoint; on success, tm=T and ym is the returned endpoint approximation. On any other status, A is the accepted prefix and ym is the last accepted approximation.

Every maximum and minimum below is over a displayed nonempty finite list of real numbers; existence follows from Every nonempty finite set of reals has a maximum and a minimum.

Procedure. Initialize t:=t0, y:=y0, A:=((t0,y0)), and proposal hprop:=hinit. If t0=T, return success with A. For each attempt index k=1,…,N, perform exactly the following steps:

  1. Set h:=min⁡(hprop,hmax⁡,T−t). The last term permits a final clipped step shorter than hmin⁡. If h≤0 before reaching T, return failure with A.
  2. Evaluate the shared stages in tableau order, checking before each evaluation that its time-state input lies in D. If a stage input is outside D, its evaluation is undefined, or its value is nonfinite, return failure with A. Compute both pair outputs; if either output or any arithmetic needed to compute them is undefined, fails, or is nonfinite in the rounded realization, return failure with A.
  3. Define si:=atol+rtolmax⁡(∣(y)i∣,∣(Y)i∣) and Q:=max⁡i∣(Y^−Y)i∣/si, where Y is the high-order value and Y^ the low-order value. If any scale or Q operation fails or is nonfinite in the rounded realization, return failure with A. If Q≤1, first check (t+h,Y)∈D; if not, return failure with A. Otherwise accept: set t:=t+h, y:=Y, and append (t,y) to A. If Q>1, reject and retain t,y,A.
  4. If the attempt was accepted and t=T, return success with A. Otherwise, if it was rejected and h≤hmin⁡, return minimum-step-rejected with A. These terminal checks precede the budget check, so a final accepted step that reaches T succeeds and a rejection at the minimum step reports that safeguard.
  5. If k=N, return attempt-budget-exhausted with A. Otherwise compute g={γmax⁡,Q=0,min⁡(γmax⁡,max⁡(γmin⁡,σ/Qp+1)),Q>0. Set hprop:=min⁡(hmax⁡,max⁡(hmin⁡,gh)) and continue to attempt k+1. A failed or nonfinite rounded computation of g or hprop returns failure with A.

For Q>0, Qp+1 is the unique positive (p+1)st root supplied by Existence and uniqueness of n-th roots: a unique a1/n≥0 with (a1/n)n=a. The exponent 1/(p+1) is a leading-error model for step selection; neither acceptance nor this controller is a global error certificate or a stiffness test.

The mathematical specification evaluates each displayed operation, including maximum, minimum, absolute value, and positive-root evaluation, exactly. A rounded implementation instead applies its fixed finite-format rounding rule to every stage, output, scale, and controller-factor arithmetic operation and uses the resulting stored high and low values in the displayed difference and acceptance test; nonfinite or failed operations return failure. The finite termination theorem applies to either realization when each attempt has finite work. The rounded realization has no a posteriori guarantee: a tolerance below its resolution can be accepted because both stored values coincide.

DefinitionDefinition: Literature-sourcedProof: Not applicablejudge pass (gpt-6-luna)Open item page →

Euler–Heun embedded Runge–Kutta pair

Definition

For y′=f(t,y), take the shared explicit stages K1=f(tn,yn),K2=f(tn+h,yn+hK1). The Euler member is YE=yn+hK1 and the Heun explicit trapezoidal member is YH=yn+h2(K1+K2). Their embedded difference is YH−YE=h2(K2−K1). The local orders are proved separately. In Embedded Runge–Kutta pair and difference estimator notation, the common tableau has c=(0,1), A21=1, high weights (1/2,1/2) and low weights (1,0).

PropositionStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

A nonzero leading defect makes the embedded difference asymptotically match the low-order defect

Statement

Fix one initial value problem and initial state. Let Dp(h):=Y^(h)−y(t+h) be the low member's one-step defect and Dp+1(h):=Y(h)−y(t+h) the high member's defect, using the same exact initial state and step start. Suppose, as h↓0, Dp(h)=ahp+1+O(hp+2),Dp+1(h)=O(hp+2) for a fixed vector a∈Rd. Here O(hr) for a vector means a remainder whose Euclidean norm is at most Chr for all sufficiently small positive h. Then Y^(h)−Y(h)=ahp+1+O(hp+2). If a≠0, the estimator satisfies E(h)/∥Dp(h)∥2→1. If a=0, these hypotheses do not imply that this ratio tends to one or that the estimator is nonzero; the Euler–Heun pair on y′=t2, y(0)=0, has ratio 3/2 as computed below.

Facts & Assumptions

Given: The two outputs and Euclidean estimator in Embedded Runge–Kutta pair and difference estimator, with the two displayed defect expansions.

[F1]

Embedded Runge–Kutta pair and difference estimator: E(h)=∥Y^(h)−Y(h)∥2.

[F2]

Cauchy-Schwarz ∣⟨x,y⟩∣≤∥x∥2∥y∥2 with its equality case, the triangle inequality for ∥⋅∥2, the parallelogram law and polarisation: the Euclidean norm is continuous and satisfies ∣∥u∥2−∥v∥2∣≤∥u−v∥2.

[F3]

Euler–Heun embedded Runge–Kutta pair: Heun and Euler use the two shared stages K1=f(t,y) and K2=f(t+h,y+hK1), with outputs YE=y+hK1 and YH=y+h2(K1+K2).

Proof

1.1givenF1algebra

Subtracting the two defect identities cancels the common exact value: Y^−Y=Dp−Dp+1=ahp+1+O(hp+2). Thus there is a vector remainder r(h)=O(hp+2) with Y^−Y=hp+1(a+hr1(h)), where r1 is bounded for all sufficiently small positive h.

2.1F1F2F3step 1.1algebra∎

By [F2], ∣E(h)/hp+1−∥a∥2∣≤h∥r1(h)∥2→0. If a≠0, the same argument gives ∥Dp(h)∥2/hp+1→∥a∥2>0; dividing the two positive limits proves E(h)/∥Dp(h)∥2→1. If a=0, the expansions give only Dp=O(hp+2) and E=O(hp+2), with no lower bound. To verify that the ratio-one conclusion can fail for an actual embedded Runge–Kutta pair, use the Heun–Euler pair [F3] on y′=t2, y(0)=0: K1=0, K2=h2, YE=0, YH=h3/2, and the exact endpoint is h3/3. Thus D1=−h3/3, the estimator is h3/2, and their norm ratio is 3/2, while the h2 coefficient is zero. Conversely, for the zero field with zero initial state, both outputs and the estimator vanish identically, so no positive lower bound for the estimator follows either.

DefinitionDefinition: Literature-sourcedProof: Not applicablejudge pass (gpt-6-luna)Open item page →

Quadratic continuous extension for Heun's method

Definition

For one Heun step from (tn,yn) of size h with stages K1,K2 as in Euler–Heun embedded Runge–Kutta pair, define its quadratic continuous extension for 0≤θ≤1 by Pn(θ):=yn+h(θK1+12θ2(K2−K1)). It has Pn(0)=yn and Pn(1)=YH, the accepted Heun endpoint. It is a separate within-step approximation; its order is analyzed independently of the endpoint order.

DefinitionDefinition: Literature-sourcedProof: Not applicablejudge pass (gpt-6-luna)Open item page →

Finite rational residual-tube certificate for an ODE trajectory

Definition

Fix a dimension d≥1, rational times a<T, a rational initial vector y0, and an ODE field f represented by a finite acyclic expression DAG with rational constants, time/state inputs, and only +,−,×,÷ nodes. Its domain consists of points where every division is defined. Write Dyf for the matrix of partial derivatives with respect to the state coordinates. A finite rational residual-tube certificate consists of the following exact rational data:

  1. A finite partition a=t0<t1<⋯<tm=T. On each panel [tj,tj+1], a vector polynomial Uj(t) with dyadic (hence rational) coefficients, whose neighboring endpoint values agree exactly. These stored coefficients define the actual reconstruction, including any endpoint correction or rounded stage value used by an implementation.
  2. For each panel, a closed rational state box Xj⊂Rd, rational bounds Lj≥0, ρj≥0, a rational dj≥0, and a polynomial radius Rj(t) with rational coefficients. The radius polynomials agree at neighboring endpoints. For a panel's finite rational subdivision, the intended inequalities are Rj(t)>0, Rj′(t)−LjRj(t)−ρj>0, and Uj(t)+[−Rj(t),Rj(t)]d⊆Xj.
  3. A finite rational subdivision of every panel, with exact endpoint coverage, no gaps, and pairwise-disjoint interiors. It supplies cells on which each required range test below is performed. Rational cell endpoints and constants are enclosed by directed outward rounding to finite dyadic endpoints before interval evaluation; an unrepresentable or overflowing conversion cannot validate.
  4. An initial check target d0≥0 with ∑i(U0(a)i−(y0)i)2≤d02 and d0<R0(a).

The certificate is validated only if outward-rounded real-interval evaluation on every supplied cell proves all three radius/tube inequalities, the range inclusion in Xj, that every division denominator in the field and its state derivatives excludes zero on the time-state box [tj,tj+1]×Xj, and ∑i=1dsup⁡∣Uj,i′−fi(t,Uj(t))∣2≤ρj2,∑i,k=1dsup⁡∣∂ykfi(t,y)∣2≤Lj2 there. Here each supremum is replaced in the check by the maximum absolute endpoint of a finite outward interval enclosure; the residual expression is evaluated at the actual polynomial Uj, so interpolation, stage, and storage errors already present in that reconstruction are included. Strict inequalities must have a certified positive interval lower endpoint; an inconclusive, nonfinite, unsupported, or failed test is not validation.

This format certifies only rational expression fields and polynomial reconstructions using the stated finite checks. It uses real intervals, not complex rectangles or balls, and does not claim an evaluator for transcendental functions or general library floating-point operations. The page proves the soundness of a validated certificate separately.

The finite DAG and real-interval conventions are those of Real intervals, complex rectangles and ball enclosures and Outward-rounded interval, rectangle and ball operations.

RemarkRemark: Literature-sourcedProof: Not applicablejudge pass (gpt-6-luna)Open item page →

A fixed-mesh global error theorem does not certify an adaptive controller

Scope warning

Global error from uniform one-step defect and stability assumes a prescribed uniform mesh tn=a+nh, a one-step defect bound on that mesh, and a stability estimate for propagation on those steps. Its conclusion therefore applies when those hypotheses hold. The controller in Finite-budget adaptive Runge–Kutta controller accepts variable, state-dependent step sizes based on a pair difference. That difference is not the exact one-step defect hypothesis of the fixed-mesh theorem. No uniform mesh, defect reliability estimate, mesh-ratio control, or variable-step propagation theorem is supplied by that theorem. It may be used on a particular adaptive run only after those distinct hypotheses have independently been proved; its fixed-mesh statement alone yields no adaptive global error certificate.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

The bounded adaptive Runge–Kutta controller terminates

Statement

For finite-dimensional states and the finite-budget procedure in Finite-budget adaptive Runge–Kutta controller, the controller returns one of success, failure, minimum-step-rejected, or attempt-budget-exhausted after at most N trial attempts. Each individual attempt uses finitely many stage evaluations and arithmetic operations.

Facts & Assumptions

Given: A controller input satisfying Finite-budget adaptive Runge–Kutta controller with finite stage count s and attempt budget N.

[F1]

Finite-budget adaptive Runge–Kutta controller: the procedure runs attempt indices k=1,…,N in order, advances to k+1 only after a nonterminal attempt, and returns attempt-budget-exhausted after the Nth attempt unless an earlier terminal branch applies. Each trial uses the fixed finite tableau stage count and finite state dimension.

Proof

1.1givenF1algebra

Fix an attempt. Computing its trial size, its s stages, its two weighted sums, and the finite-dimensional scaled maximum uses finitely many operations. Any stipulated undefined or nonfinite stage returns failure; an accepted step reaching T returns success; and a rejection at the minimum step returns its stated status, in that order before the budget branch. A nonterminal attempt computes its next proposal and advances to the next loop index.

2.1F1step 1.1induction∎

The loop visits only the finite indices 1,…,N, with exactly one trial per visited index. If no earlier terminal branch returns, the Nth attempt returns attempt-budget-exhausted; in particular, an accepted step reaching T on that attempt has already returned success. Thus termination occurs after at most N attempts.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

Local orders and leading estimator term for the Euler–Heun pair

Statement

Let d≥1 and let f be C2 on an open neighborhood of a compact convex time-state set containing the initial point, the short exact solution segment, and the Euler stage points. Assume the first and second derivatives of f are bounded there. For the exact solution y′=f(t,y) starting from y(t)=y0, put g:=∂tf(t,y0)+Dyf(t,y0)f(t,y0). Here ∂tf is the time derivative and Dyf is the Jacobian in the state variables. The notation O(hk) means a norm bounded by a constant times hk for sufficiently small positive h, uniformly over the compact starting set when stated. For all sufficiently small h>0, the Euler and Heun one-step values in Euler–Heun embedded Runge–Kutta pair satisfy YE−y(t+h)=−12h2g+O(h3),YH−y(t+h)=O(h3),YH−YE=12h2g+O(h3). Moreover, uniformly for 0≤θ≤1, y(t+θh)=y0+θhK1+12θ2h2g+O(h3),K1=f(t,y0). For a family of starting points, assume one common h0>0 for which all exact segments and stage points stay in the same neighborhood. Under this condition the estimates are uniform over the compact starting set because the derivative bounds are common. Thus Euler has local order one and Heun has local order at least two on that set. If g≠0, the embedded norm estimates Euler's defect asymptotically with ratio one; when g=0, that ratio conclusion does not follow from these orders.

Facts & Assumptions

Given: The smooth vector field and starting points in the Statement, and the Euler–Heun formulas in Euler–Heun embedded Runge–Kutta pair.

[F1]

Euler–Heun embedded Runge–Kutta pair: K1=f(t,y0), K2=f(t+h,y0+hK1), YE=y0+hK1, and YH=y0+h2(K1+K2).

[F2]

One-step ODE methods, local defect, uniform order, and step stability: the local defect is one-step value minus the exact next value, and a uniform O(hp+1) defect gives local order p.

[F3]

The chain rule for total derivatives: D(g∘f)(a)=Dg(f(a))∘Df(a): the derivative of a differentiable composition is the composition of the total derivatives.

[F4]

Multivariable Taylor formula with a Lagrange remainder along a line segment: for a Ck+1 function on an open convex neighborhood, its degree-k Taylor polynomial has a remainder bounded by the (k+1)st derivatives on the segment times a constant multiple of the segment length to power k+1.

[F5]

A nonzero leading defect makes the embedded difference asymptotically match the low-order defect: if the low defect has a nonzero hp+1 coefficient and the high defect is O(hp+2), the difference norm divided by the low defect norm tends to one.

[F6]

The mean value theorem, as the case g(x)=x of Cauchy's: for f continuous on [a,b] with a<b and differentiable on (a,b) there is c∈(a,b) with f(b)−f(a)=f′(c)(b−a): Rolle's theorem follows from the mean value theorem on a closed interval; three successive applications give the scalar third-order Taylor remainder with an interior point.

Proof

1.1givenF3F6algebra

Define F(s):=f(s,y(s)). On the open segment, [F3] gives F′(s)=∂tf(s,y(s))+Dyf(s,y(s))f(s,y(s)), which extends continuously to s=t with value g. For each component and 0<u≤h, the mean value theorem [F6] on [t,t+u] shows its secant slope equals Fi′(ci) for some t<ci<t+u; as u↓0 this tends to gi. Thus the right derivative of F at t is g, so y′′(t)=g. Since f is C2, differentiating the displayed formula on the open segment shows F′′ is bounded there and extends continuously to the endpoints; hence y′′′=F′′ is bounded on the segment. For a coordinate yi and 0<u≤h, let Ri(u):=yi(t+u)−yi(t)−uyi′(t)−12u2yi′′(t), set Ci:=Ri(u)/u3, and put Gi(v):=yi(t+v)−yi(t)−vyi′(t)−12v2yi′′(t)−Civ3 on [0,u]. Then Gi(0)=Gi(u)=Gi′(0)=Gi′′(0)=0. Three successive applications of Rolle's theorem [F6] give Gi′′′(ξi)=0 for some 0<ξi<u, so Ri(u)=yi′′′(t+ξi)u3/6. At u=0 the remainder is zero. Applying this to u=h and every u=θh, and using the common derivative bounds and finite dimension, proves both the endpoint expansion and the uniform-in-θ expansion in the Statement.

2.1givenF1F4step 1.1algebra

For fixed h, the segment from (t,y0) to the Euler stage (t+h,y0+hK1) lies in the compact convex time-state set. Since that set lies in an open neighborhood where f is C2, compactness gives a smaller open convex neighborhood of the segment on which the Taylor theorem [F4] applies. Taylor expansion of each component of f there along the increment (h,hK1) has linear term h∂tf+hDyfK1=hg and a second-derivative remainder O(h2), uniformly by the boundedness assumption. Therefore K2=K1+hg+O(h2). Substitution into [F1] gives YE=y0+hK1 and YH=y0+hK1+12h2g+O(h3).

3.1F1F2F5step 1.1step 2.1algebra∎

Subtract the exact expansion in step 1.1 to obtain the two defect formulas and subtract the Euler output from the Heun output to obtain the estimator expansion. These are uniform O(h2) and O(h3) defect bounds, so [F2] gives the stated local orders. For p=1, the Euler defect coefficient is −g/2 and the Heun defect is O(h3); if g≠0, [F5] gives the ratio-one conclusion. If g=0, both leading coefficients vanish and [F5] supplies no such inference.

LemmaStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

Symbolic derivative recursion for a rational expression DAG is correct

Statement

For a finite rational expression DAG of Finite rational residual-tube certificate for an ODE trajectory, at every input point where each division denominator is nonzero, the DAG evaluates to a continuously differentiable function of time and state. The recursion assigning zero derivatives to constants, coordinate derivatives to inputs, sum/difference rules, the product rule, and D(u/v)=vDu−uDvv2 for a division node computes its actual total derivative. On any open neighborhood where all denominators stay nonzero, the represented field is locally Lipschitz.

Facts & Assumptions

Given: The finite acyclic rational expression DAG and an input point where all division denominators are nonzero.

[F1]

Finite rational residual-tube certificate for an ODE trajectory: the only DAG operations are constants, input coordinates, addition, subtraction, multiplication, and division.

[F2]

Chain sum product and composition rules for Banach derivatives: sums and bounded-bilinear products of Fréchet-differentiable maps obey the corresponding derivative rules; [F6] gives the same first-order remainder convention for the total derivatives used here.

[F3]

The chain rule for total derivatives: D(g∘f)(a)=Dg(f(a))∘Df(a): derivatives of differentiable compositions are obtained by composing their total derivatives.

[F5]

Cauchy-Schwarz ∣⟨x,y⟩∣≤∥x∥2∥y∥2 with its equality case, the triangle inequality for ∥⋅∥2, the parallelogram law and polarisation: ∑j=1n∣hj∣≤n∥h∥2 and finite-dimensional Euclidean norms obey the triangle inequality.

[F6]

The total (Fréchet) derivative Df(a) as the linear first-order approximation with o(∥h∥2) remainder: total differentiability gives the expansion u(x+h)=u(x)+Du(x)h+o(∥h∥2).

Proof

1.1F1constructinduction

Order the finite acyclic graph topologically. A constant node defines a constant smooth function with derivative zero; an input node is a coordinate projection with its coordinate derivative. Assume inductively that the parent nodes define C1 functions with their assigned derivatives.

2.1F2F6step 1.1algebra

For an addition or subtraction node, [F2] gives the sum or difference of the parent derivatives. For a product node, apply its bounded-bilinear product rule to real multiplication, which is bounded by ∣ab∣≤∣a∣∣b∣, to obtain vDu+uDv. These derivatives are continuous because the parent values and derivatives are continuous.

2.2F6step 1.1algebra

At a division node write u0=u(x), v0=v(x)≠0, A=Du(x), B=Dv(x), and Δu=Ah+ru, Δv=Bh+rv, where ru,rv=o(∥h∥2) by [F6]. Continuity of v keeps v0+Δv≠0 near x. Put L(h)=v0Ah−u0Bh and R=v0ru−u0rv. Direct algebra gives u(x+h)v(x+h)−u0v0−L(h)v02=v02R−v0L(h)Δvv03(v0+Δv). Here R=o(∥h∥2), L(h)=O(∥h∥2), and Δv=O(∥h∥2), while the denominator stays bounded away from zero. Thus the right side is o(∥h∥2), so the quotient derivative is (v0Du(x)−u0Dv(x))/v02. Its formula is continuous wherever v≠0.

3.1F1F3F4F5step 2.1step 2.2constructinduction∎

Induction through the topological order, using steps 2.1–2.2, proves that every node is C1 with its recursively assigned derivative, so the root derivative is correct. Continuity and nonvanishing of the finitely many denominator functions give a ball around the input on which all denominators stay nonzero. Shrink it so every partial derivative of every root component is bounded in absolute value by a common finite M, using continuity at the center and the finite number of entries. For two points u,v in this convex ball, apply [F4] to each scalar component along v+s(u−v): its derivative has magnitude at most M∑j∣uj−vj∣≤Md+1∥u−v∥2 by [F5]. Combining the finitely many component bounds gives a Lipschitz constant for the root map. Thus the field is locally Lipschitz.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

Heun's quadratic dense output has local order two

Statement

Under the smoothness and bounded-derivative hypotheses of Local orders and leading estimator term for the Euler–Heun pair, for a fixed initial value and all sufficiently small h>0, sup⁡0≤θ≤1∥Pn(θ)−y(tn+θh)∥2≤Ch3 for a constant C independent of h and θ. Thus this continuous extension has local order two uniformly throughout the accepted step, with a defect separate from the endpoint defect.

Facts & Assumptions

Given: The Heun stage and dense-output formulas, the smooth vector field and bounded derivatives from Local orders and leading estimator term for the Euler–Heun pair, and 0≤θ≤1.

[F1]

Quadratic continuous extension for Heun's method and Euler–Heun embedded Runge–Kutta pair: Pn(θ)=yn+h(θK1+12θ2(K2−K1)), and YH−YE=h2(K2−K1).

[F2]

Local orders and leading estimator term for the Euler–Heun pair: uniformly for 0≤θ≤1, y(tn+θh)=yn+θhK1+12θ2h2g+O(h3) and YH−YE=12h2g+O(h3). Together with [F1], the latter gives K2−K1=hg+O(h2).

Proof

1.1F1F2algebra

From [F1] and [F2], h2(K2−K1)=12h2g+O(h3); since h>0, division by h/2 gives K2−K1=hg+O(h2). Substituting this into the defining formula for Pn in [F1], and using 0≤θ2≤1, gives Pn(θ)=yn+θhK1+12θ2h2g+O(h3) uniformly in θ.

2.1F2step 1.1algebra∎

The uniform exact-path expansion in [F2] has the same first two terms as step 1.1, with an O(h3) remainder independent of θ. Subtracting it from the expansion of Pn(θ) proves the asserted uniform estimate.

AlgorithmAlgorithm: Literature-sourcedProof: Not applicablejudge pass (gpt-6-luna)Open item page →

Finite checker for rational residual-tube certificates

Definition

Input a finite rational certificate of Finite rational residual-tube certificate for an ODE trajectory, an outward-rounded real interval format, and the matching operation evaluator of Outward-rounded interval, rectangle and ball operations. Return either certified or inconclusive by this finite procedure:

  1. Parse and structurally check the rational field DAG, finite mesh, panel polynomials, state boxes, radius polynomials, rational bounds, and subdivisions. Reject malformed syntax, noncanonical/nonfinite numbers, gaps, nontrivial interior overlaps, endpoint mismatches, or a non-acyclic graph as inconclusive.
  2. In topological order, construct the formal time/state derivative DAG for each field output by Symbolic derivative recursion for a rational expression DAG is correct. If any recursion node is unsupported, return inconclusive.
  3. Convert each exact rational cell endpoint and constant to a directed outward dyadic interval. On each supplied time cell and panel box, evaluate the field, derivative DAG, reconstruction, its derivative, radius and strict-margin expressions using only outward-rounded real interval addition, subtraction, multiplication, division, and rational constants. If any operation returns split-domain, entire, domain-error, overflow, or inconclusive, return inconclusive.
  4. Check exactly that the time cells cover each panel and that neighboring reconstruction/radius endpoints agree; verify the initial squared-error inequality separately. From interval endpoints check: each radius and each strict supersolution margin has strictly positive lower endpoint; the componentwise reconstruction-plus-radius boxes lie inside Xj; the residual component intervals satisfy the displayed squared-norm bound by ρj2; all field and derivative denominator intervals exclude zero; and the squared Frobenius bound on the state Jacobian is at most Lj2. Check the initial squared error bound and strict comparison d0<R0(a) by exact rational arithmetic.
  5. Return certified only when every check passes. Any failed inclusion or comparison returns inconclusive with the first failed check identifier. No automatic subdivision, transcendental evaluation, complex rectangle operation, or ball operation is performed.

The finite interval evaluator and its DAG interpretation are those of Outward-rounded interval, rectangle and ball operations and Outward-rounded operations are inclusion-isotone and enclose DAG evaluations. A separate theorem proves soundness of every certified result.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

A validated rational residual-tube certificate encloses an exact ODE solution

Statement

If Finite checker for rational residual-tube certificates returns certified on a finite rational residual-tube certificate for the rational ODE field f and initial value y0, then the IVP has a unique exact solution y on the entire interval [a,T]. On every panel, ∥y(t)−Uj(t)∥2<Rj(t),y(t)∈Xj, where Uj, Rj, and Xj are the certified reconstruction, positive radius, and state box. The residual is evaluated from the stored polynomial Uj itself, so any interpolation, stage, or storage error already present in those coefficients is included.

Facts & Assumptions

Given: A finite rational certificate and a certified return from the checker in Finite checker for rational residual-tube certificates.

[F1]

Finite rational residual-tube certificate for an ODE trajectory: a certificate stores exact rational panels, polynomial reconstructions, boxes, radius functions, residual envelopes, and strict supersolution bounds.

[F2]

Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: every finite interval DAG enclosure contains each exact value assigned to its nodes; nonfinite statuses assert no finite enclosure.

[F3]

Symbolic derivative recursion for a rational expression DAG is correct: the rational field DAG is C1 where its divisions are nonzero, its formal derivatives are correct, and it is locally Lipschitz there.

[F4]

Choice-free residual error bound for piecewise-C1 ODE reconstructions: for a piecewise-C1 reconstruction, piecewise-continuous one-sided Lipschitz coefficient ℓ, and residual bound ρ, the exact solution error is at most its integrating-factor residual bound.

[F5]

A maximal ODE solution cannot remain in a compact tube to a finite endpoint: a maximal solution cannot end at a finite right endpoint while its graph remains in a compact subset of the open ODE domain.

[F8]

Every Picard–Lindelöf initial value problem has one maximal solution on an open interval: a locally Lipschitz IVP has a unique maximal solution through its initial data.

[F10]

The second fundamental theorem: if G is differentiable on [a,b] with G′=f and f is integrable, then ∫abf=G(b)−G(a): for a C1 function on a closed interval, with one-sided endpoint derivatives, integrating its continuous derivative recovers the endpoint increment.

[F12]

The Euclidean inner product ⟨x,y⟩=∑k<nxkyk on Rn: the Euclidean inner product is bilinear, and ∥w∥22=⟨w,w⟩.

[F13]

Squaring is monotone on the nonnegatives: for nonnegative r,s, r2≤s2 implies r≤s.

Proof

1.1F1F2F12F13given

A certified return means each interval operation was finite and every listed inclusion and strict inequality passed. By [F2], all exact rational-DAG values and their derivative-DAG values lie in the checked intervals. Thus on each panel f is defined on [tj,tj+1]×Xj. The residual interval tests bound each component's absolute value by its checked supremum, whose squared sum is at most ρj2; [F12] and [F13] give ∥Uj′−f(t,Uj)∥2≤ρj. Define ∥A∥F:=(∑i,kAik2)1/2; the Jacobian interval tests bound this sum by Lj2, so [F13] gives ∥Dyf∥F≤Lj. The checker also proves Uj(t)+[−Rj(t),Rj(t)]d⊆Xj. Its exact initial squared comparison and [F12]–[F13] give ∥U0(a)−y0∥2≤d0<R0(a). For each coordinate, ∣U0(a)i−(y0)i∣2≤∑k∣U0(a)k−(y0)k∣2=∥U0(a)−y0∥22, so [F13] places y0 in U0(a)+[−R0(a),R0(a)]d⊆X0. Hence (a,y0) lies in the checked open ODE domain.

2.1F3F4F6F7F12step 1.1algebra

Fix w=u−v and define ϕ(s)=⟨w,f(t,v+sw)⟩ for 0≤s≤1. The segment stays in Xj by convexity. By [F3] and bilinearity in [F12], ϕ′(s)=⟨w,Dyf(t,v+sw)w⟩. The bound in step 1.1 and rowwise Cauchy–Schwarz give ∥Dyf w∥2≤∥Dyf∥F∥w∥2≤Lj∥w∥2, and [F7] then gives ∣ϕ′(s)∣≤Lj∥w∥22. [F6] on [0,1] yields ϕ(1)−ϕ(0)=⟨u−v,f(t,u)−f(t,v)⟩≤Lj∥u−v∥22. Thus the one-sided Lipschitz hypothesis in [F4] holds with ℓ=Lj whenever the exact and reconstructed states lie in the certified box.

3.1F1F3F4F8F10F11F13step 1.1step 2.1algebra

Picard–Lindelöf applies locally by [F3], and [F8] gives a unique maximal solution through (a,y0). On any interval where it exists and lies in the checked panel boxes, apply [F4] panel by panel. Write δj(t):=Rj′(t)−LjRj(t)−ρj, which is strictly positive by the checker. Integrating the scalar identity Rj′=LjRj+ρj+δj with the same integrating factor shows that the radius dominates the error bound strictly: the initial gap is positive because d0<R0(a), and each panel adds the positive integral of e∫stLjδj(s), using positivity of the exponential [F11] and the fundamental theorem [F10]. For e=y−Uj, each coordinate satisfies ∣ei∣2≤∑k∣ek∣2=∥e∥22, so [F13] gives ∣ei∣≤∥e∥2; hence ∥e∥2<Rj(t) implies y(t)∈Uj(t)+[−Rj(t),Rj(t)]d⊆Xj. The comparison therefore applies up to any first exit and gives a strict radius bound there, ruling out that exit. At each panel endpoint the stored reconstructions and radii agree, so the strict inequality continues across the finite partition.

4.1F3F5F9step 3.1step 1.1∎

If the maximal solution ended before or at T, the no-first-exit conclusion in step 3.1 would keep its graph inside the finite union of the closed bounded boxes [tj,tj+1]×Xj, which is compact by [F9] and lies in the rational field's open domain. All divisions stay away from zero there by step 1.1. This contradicts [F5], so the maximal solution reaches T. Applying the panelwise error estimate on the whole interval gives ∥y(t)−Uj(t)∥2<Rj(t) and hence y(t)∈Xj for every panel time. Uniqueness follows from local Lipschitz continuity in [F3] and the local uniqueness clause of Picard–Lindelöf.

TheoremStatement: AI-adaptedProof: AI-adaptedprecheck passjudge pass (gpt-6-luna)Open item page →

The rational residual-tube certificate checker terminates

Statement

For every finite input record, Finite checker for rational residual-tube certificates returns certified or inconclusive after finitely many operations. It performs no unbounded subdivision or search.

Facts & Assumptions

Given: A finite certificate record and the finite checker procedure in Finite checker for rational residual-tube certificates.

[F1]

Finite checker for rational residual-tube certificates: all loops traverse supplied finite arrays, a finite acyclic DAG, finite panels and finite supplied subdivisions; all arithmetic operations are the finite interval operations of Outward-rounded interval, rectangle and ball operations.

Proof

1.1givenF1algebra

Structural validation traverses finite input arrays and the finite graph. A topological traversal visits each acyclic node finitely often, and the derivative recursion creates a fixed finite number of derivative nodes per source node and coordinate. Therefore the syntax and derivative phases terminate.

2.1F1step 1.1algebra∎

The numerical phase visits each of finitely many panels and cells and executes a fixed finite list of interval operations per field, reconstruction, derivative, and margin expression. Each interval operation returns either a finite interval or one of its specified statuses in finitely many endpoint operations. Every comparison is rational and finite. The procedure therefore reaches a passing or failed check and returns one of its two statuses.

5 · Examples, counterexamples and false statements

None yet.

Sources